CVE-2019-13972: Improper Neutralization of Input During Web Page Generation

LayerBB 1.1.3 allows XSS via the application/commands/new.php pmtitle variable, a related issue to CVE-2019-17997...